User Roles Comparison (Policy Compliance)

The following table provides a comparison of privileges granted to user roles for compliance management.

= privilege is granted to the user role

* = privilege that can be granted to the user role, depending on when subscription was created

o = privilege that can be assigned by a Manager

X = privilege that can be assigned by a Manager ONLY when subscription is configured to allow it

To give a user the ability to perform compliance tasks, edit the user's account and select the "Manage compliance" option.

Manager and Auditor privileges apply to all user configurations (such as compliance profiles, policies, and exceptions), regardless of who created them. Unit Manager privileges apply to user configurations created within their respective business units. Scanner and Reader privileges apply to personal configurations only.

Privileges	Manager	Auditor	Unit Manager	Scanner	Reader
Compliance Scanning
View compliance scan history			o	o
Launch compliance scans			o	o
Schedule compliance scans			o	o
Cancel compliance scans			o	o
Pause/resume compliance scans			o	o
Compliance Reporting
Manage policy report templates
Run compliance reports (on compliance data)			o	o	o
General Management
Manage asset tags (Learn more)					*
Add compliance hosts			o	X
Remove compliance hosts
View compliance hosts			o	o	o
Purge compliance host information			o	o	o
Manage compliance policies			o
Manage compliance profiles			o	o
Manage authentication records and vaults			o	X
Manage business units
Manage networks
Controls
View controls			o	o	o
Add comments to controls
Create user defined controls			o
Update/delete user defined controls			o
Exceptions
Create exception requests			o	o	o
Add comments to exceptions			o	o	o
Reassign exceptions			o	o	o
Accept/reject exceptions			o
Delete exceptions

Check out this video: